Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://39097 [ 31.698378][ T4340] cgroup: Unknown subsys name 'net' [ 31.914507][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.209511][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.208146][ T4366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.209879][ T4366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.211219][ T4366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.215465][ T4366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.217049][ T4366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.218347][ T4366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.548090][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.549646][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.554734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.562213][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.563579][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.565007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.804129][ T4397] chnl_net:caif_netlink_parms(): no params data found [ 39.821561][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.822896][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.824540][ T4397] device bridge_slave_0 entered promiscuous mode [ 39.826917][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.828171][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.829699][ T4397] device bridge_slave_1 entered promiscuous mode [ 39.836589][ T4397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.839066][ T4397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.846051][ T4397] team0: Port device team_slave_0 added [ 39.848382][ T4397] team0: Port device team_slave_1 added [ 39.854167][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.855421][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.859733][ T4397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.862684][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.863899][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.868416][ T4397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.903211][ T4397] device hsr_slave_0 entered promiscuous mode [ 39.951649][ T4397] device hsr_slave_1 entered promiscuous mode [ 40.026070][ T4397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.043164][ T4397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.082550][ T4397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.103549][ T4397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.149474][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.150866][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.152495][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.153763][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.171273][ T4397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.175710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.177917][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.179534][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.185212][ T4397] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.188168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.190122][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.191366][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.194777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.196252][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.197413][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.203244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.205026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.208290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.213456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.216426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.218946][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.273752][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.275336][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.280131][ T4397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.286025][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.287901][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.294137][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.295955][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.297899][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.299314][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.301674][ T4397] device veth0_vlan entered promiscuous mode [ 40.304956][ T4397] device veth1_vlan entered promiscuous mode [ 40.312442][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.313965][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.315524][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.317268][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.319686][ T4397] device veth0_macvtap entered promiscuous mode [ 40.323368][ T4397] device veth1_macvtap entered promiscuous mode [ 40.327995][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.329386][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.331185][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.333253][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.334824][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.338379][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.339733][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.342400][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.345154][ T4397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.346659][ T4397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.348133][ T4397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.349598][ T4397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:40 executed programs: 0 [ 40.978761][ T4366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.980414][ T4366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.982077][ T4366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.983816][ T4366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.985304][ T4366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.986659][ T4366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.272857][ T4456] chnl_net:caif_netlink_parms(): no params data found [ 41.352147][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.353567][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.355260][ T4456] device bridge_slave_0 entered promiscuous mode [ 41.357285][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.358452][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.359892][ T4456] device bridge_slave_1 entered promiscuous mode [ 41.366396][ T4456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.368822][ T4456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.377636][ T4456] team0: Port device team_slave_0 added [ 41.379874][ T4456] team0: Port device team_slave_1 added [ 41.385302][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.386590][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.391139][ T4456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.713838][ T4456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.714993][ T4456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.719206][ T4456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.782867][ T4456] device hsr_slave_0 entered promiscuous mode [ 41.831617][ T4456] device hsr_slave_1 entered promiscuous mode [ 41.871509][ T4456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.872973][ T4456] Cannot create hsr debugfs directory [ 42.012808][ T4456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.052064][ T4366] Bluetooth: hci0: command 0x0409 tx timeout [ 45.131507][ T4366] Bluetooth: hci0: command 0x041b tx timeout [ 45.482741][ T4456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.942541][ T4456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.033407][ T4456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.243280][ T4456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.292607][ T4456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.393406][ T4456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.483702][ T4456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.632301][ T4456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.635836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.637451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.639855][ T4456] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.674583][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.676462][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.678102][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.679382][ T1669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.681112][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.684438][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.686177][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.687825][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.689093][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.692836][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.696006][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.698768][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.700968][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.703016][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.705594][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.707366][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.710029][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.713185][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.716138][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.717772][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.720054][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.875964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.877343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.881325][ T4456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.886963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.888729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.894105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.895886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.897518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.898953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.901180][ T4456] device veth0_vlan entered promiscuous mode [ 46.966578][ T4456] device veth1_vlan entered promiscuous mode [ 46.972789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.974479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.976266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.977862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.980258][ T4456] device veth0_macvtap entered promiscuous mode [ 46.982805][ T4456] device veth1_macvtap entered promiscuous mode [ 46.987680][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.989599][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.992562][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.993877][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.995539][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.997037][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.998627][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.001685][ T4456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.003580][ T4456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.005805][ T4456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.008068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.009709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.013377][ T4456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.014834][ T4456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.016279][ T4456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.017714][ T4456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.080725][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.084898][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.086675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.092976][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.094392][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.095867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.105138][ T4434] device hsr_slave_0 left promiscuous mode [ 47.135080][ T4434] device hsr_slave_1 left promiscuous mode [ 47.201536][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.202907][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.204684][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.206065][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.207802][ T4434] device bridge_slave_1 left promiscuous mode [ 47.209285][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.212718][ T4366] Bluetooth: hci0: command 0x040f tx timeout [ 47.262502][ T4434] device bridge_slave_0 left promiscuous mode [ 47.263797][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.312473][ T4470] ================================================================== [ 47.312476][ T4470] BUG: KASAN: slab-out-of-bounds in hex_string+0x3a0/0x484 [ 47.312491][ T4470] Read of size 1 at addr ffff0000d49af17c by task syz.0.17/4470 [ 47.312497][ T4470] [ 47.312501][ T4470] CPU: 1 PID: 4470 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.312507][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.312517][ T4470] Call trace: [ 47.312519][ T4470] dump_backtrace+0x1c4/0x1f0 [ 47.312527][ T4470] show_stack+0x2c/0x3c [ 47.312532][ T4470] __dump_stack+0x30/0x40 [ 47.312539][ T4470] dump_stack_lvl+0xf4/0x15c [ 47.312545][ T4470] print_address_description+0x88/0x218 [ 47.312552][ T4470] print_report+0x50/0x68 [ 47.312557][ T4470] kasan_report+0xa8/0xfc [ 47.312564][ T4470] __asan_report_load1_noabort+0x2c/0x38 [ 47.312570][ T4470] hex_string+0x3a0/0x484 [ 47.312576][ T4470] pointer+0x1cc/0xdd8 [ 47.312582][ T4470] vsnprintf+0xcc0/0x18d8 [ 47.312587][ T4470] pointer+0x7ac/0xdd8 [ 47.312592][ T4470] vsnprintf+0xcc0/0x18d8 [ 47.312598][ T4470] vscnprintf+0x6c/0xd8 [ 47.312603][ T4470] printk_sprint+0xc0/0x638 [ 47.312610][ T4470] vprintk_store+0x72c/0xb60 [ 47.312615][ T4470] vprintk_emit+0x118/0x2f0 [ 47.312621][ T4470] dev_vprintk_emit+0x2dc/0x39c [ 47.312628][ T4470] dev_printk_emit+0xe0/0x130 [ 47.312634][ T4470] __dynamic_dev_dbg+0x1b4/0x250 [ 47.312643][ T4470] dtv_property_process_get+0x2b0c/0x2c70 [ 47.312650][ T4470] dvb_frontend_do_ioctl+0x1c20/0x34f8 [ 47.312656][ T4470] dvb_usercopy+0x248/0x45c [ 47.312667][ T4470] dvb_frontend_ioctl+0x68/0x8c [ 47.312673][ T4470] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.312683][ T4470] invoke_syscall+0x98/0x290 [ 47.312692][ T4470] el0_svc_common+0x13c/0x258 [ 47.312699][ T4470] do_el0_svc+0x5c/0x134 [ 47.312706][ T4470] el0_svc+0x58/0x128 [ 47.312712][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 47.312718][ T4470] el0t_64_sync+0x18c/0x190 [ 47.312723][ T4470] [ 47.312725][ T4470] Allocated by task 4470: [ 47.312729][ T4470] kasan_set_track+0x4c/0x80 [ 47.312734][ T4470] kasan_save_alloc_info+0x24/0x30 [ 47.312739][ T4470] __kasan_kmalloc+0xa0/0xb8 [ 47.312744][ T4470] __kmalloc_node_track_caller+0xcc/0x174 [ 47.312751][ T4470] memdup_user+0x60/0x204 [ 47.312757][ T4470] dvb_frontend_do_ioctl+0xd8c/0x34f8 [ 47.312762][ T4470] dvb_usercopy+0x248/0x45c [ 47.312769][ T4470] dvb_frontend_ioctl+0x68/0x8c [ 47.312774][ T4470] __arm64_sys_ioctl+0x14c/0x1c8 [ 47.312781][ T4470] invoke_syscall+0x98/0x290 [ 47.312787][ T4470] el0_svc_common+0x13c/0x258 [ 47.312793][ T4470] do_el0_svc+0x5c/0x134 [ 47.312800][ T4470] el0_svc+0x58/0x128 [ 47.312805][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 47.312810][ T4470] el0t_64_sync+0x18c/0x190 [ 47.312815][ T4470] [ 47.312817][ T4470] The buggy address belongs to the object at ffff0000d49af000 [ 47.312817][ T4470] which belongs to the cache kmalloc-512 of size 512 [ 47.312822][ T4470] The buggy address is located 380 bytes inside of [ 47.312822][ T4470] 512-byte region [ffff0000d49af000, ffff0000d49af200) [ 47.312828][ T4470] [ 47.312829][ T4470] The buggy address belongs to the physical page: [ 47.312833][ T4470] page:00000000ded80d19 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1149ac [ 47.312839][ T4470] head:00000000ded80d19 order:2 compound_mapcount:0 compound_pincount:0 [ 47.312844][ T4470] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 47.312854][ T4470] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002600 [ 47.312860][ T4470] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 47.312863][ T4470] page dumped because: kasan: bad access detected [ 47.312865][ T4470] [ 47.312867][ T4470] Memory state around the buggy address: [ 47.312870][ T4470] ffff0000d49af000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.312874][ T4470] ffff0000d49af080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.312877][ T4470] >ffff0000d49af100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 [ 47.312880][ T4470] ^ [ 47.312884][ T4470] ffff0000d49af180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.312888][ T4470] ffff0000d49af200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.312890][ T4470] ================================================================== [ 47.312893][ T4470] Disabling lock debugging due to kernel taint [ 47.421592][ T4434] device veth1_macvtap left promiscuous mode [ 47.422724][ T4434] device veth0_macvtap left promiscuous mode [ 47.422771][ T4434] device veth1_vlan left promiscuous mode [ 47.422805][ T4434] device veth0_vlan left promiscuous mode